Amazon web services 无法使用terraform创建具有版本控制的s3 bucket

我正在AWS上使用Terraform创建一个S3 bucket

我无法使用terraform创建具有版本控制的s3 bucket。当我尝试terraform应用时，我得到了“错误放置S3版本：AccessDenied”

地形图没有问题

provider "aws" {
  region = "us-east-1"
}

variable "instance_name" {}
variable "environment" {}


resource "aws_s3_bucket" "my_dr_bucket" {
  bucket = "${var.instance_name}-dr-us-west-2"
  region = "us-west-2"
  acl    = "private"
  versioning {
    enabled = "true"
  }
}

获取以下错误： 错误：放置S3版本控制时出错：拒绝访问：拒绝访问

---

状态代码：403，请求id:21EBBB358558C617

确保您正在为提供商配置的同一区域创建S3 bucket。

确保您正在为提供商配置的同一区域创建S3 bucket。

以下代码解决了问题：

    provider "aws" {
  region = "us-east-1"
}

provider "aws" {
  alias  = "west"
  region = "us-west-2"
}

variable "instance_name" {}
variable "environment" {}

resource "aws_s3_bucket" "my_dr_bucket" {
  provider = "aws.west"
  bucket = "${var.instance_name}-dr-us-west-2"
  region = "us-west-2"
  acl    = "private"
  versioning {
          enabled = true
  }
}

---

以下代码解决了该问题：

    provider "aws" {
  region = "us-east-1"
}

provider "aws" {
  alias  = "west"
  region = "us-west-2"
}

variable "instance_name" {}
variable "environment" {}

resource "aws_s3_bucket" "my_dr_bucket" {
  provider = "aws.west"
  bucket = "${var.instance_name}-dr-us-west-2"
  region = "us-west-2"
  acl    = "private"
  versioning {
          enabled = true
  }
}

---

您用于运行Terraform的IAM帐户的权限是什么？也许它没有所有的S3权限？我已将管理员角色分配给iam用户。您用于运行Terraform的iam帐户的权限是什么？也许它没有所有的S3权限？我已将管理员角色分配给iam用户。